diff --git a/server/src/nest/mcp-shared/mcp-shared.module.ts b/server/src/nest/mcp-shared/mcp-shared.module.ts
index c56812465..65c6d5e00 100644
--- a/server/src/nest/mcp-shared/mcp-shared.module.ts
+++ b/server/src/nest/mcp-shared/mcp-shared.module.ts
@@ -2,6 +2,7 @@ import { Module } from '@nestjs/common';
 import { MikroOrmModule } from '@mikro-orm/nestjs';
 import { McpToolGuardsService } from './mcp-tool-guards.service';
 import { PermissionsModule } from '../permissions/permissions.module';
+import { RealtimeModule } from '../realtime/realtime.module';
 import { Trips } from '../../db/entities/Trips.entity';
 import { Users } from '../../db/entities/Users.entity';
 
@@ -9,14 +10,16 @@ import { Users } from '../../db/entities/Users.entity';
  * Shared guards for the @McpController domain classes. Deliberately NOT
  * @Global (the addons/permissions precedent): every consumer imports it
  * explicitly, so e2e TestingModules resolve it transitively and the module
- * graph stays honest. Database/Realtime come from their @Global modules.
+ * graph stays honest. RealtimeModule is @Global but imported here all the
+ * same: McpToolGuardsService broadcasts, and a TestingModule assembling a
+ * few domains must not depend on some other module having pulled it in.
  *
  * Trips/Users: Plan 4 Task 1 — `McpToolGuardsService.hasTripPermission`/
  * `isAdminUser`'s own `TripsRepository.getOwnerId`/`UsersRepository.getRole`
  * reads, moved off `DatabaseService`.
  */
 @Module({
-  imports: [PermissionsModule, MikroOrmModule.forFeature([Trips, Users])],
+  imports: [PermissionsModule, RealtimeModule, MikroOrmModule.forFeature([Trips, Users])],
   providers: [McpToolGuardsService],
   exports: [McpToolGuardsService],
 })